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IN THE CLAIMS 

Please cancel claims 6-10 and 20 amend claims 1, 4, 5, 11-13, 15, 19 and 25 and add new 
claim 27 as follows: 

1 . (CURRENTLY AMENDED) . A conditional access module, -fef configured to 
controlling access to a mediii program via a receiver communicably coupleable to die conditional 
access module, comprising: 

a first processor; 

a second processor; and 

an interface module, communicatively coupled to the first processor and the second 
processor, the interface module configured to fef processing all communications with the 
conditional access module and to externally manifesting a single virtual processor to the receiver[[-]]; 

wherein the interface; module receives messages from the receiver., interprets the received 
messages, and generates first processor messagesJbr the first processor and second processor 
messages_forjhe_second processor and wherein the received messages include encrypted data and 
the functional aUocation is time varied according to the encrypted data., 

2. (ORIGINAL) The apparatus of claim 1, wherein the first processor performs a 
subset of functions to control access to the media program and the second processor performs a 
second subset of functions to control access to the media program. 

3. (ORIGINAL) The apparatus of claim 1, wherein: 

the first processor is communicatively coupled a first processor memory; 
the second processor is communicatively coupled to a second processor memory; and 
wherein the first processor memory i$ isolated from the second processor and the second 
processor memory is isolated from the first processor. 
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4. (CURRENTLY AMENDED) The apparatus of claim 1 , wherein the interface 
module comprises: 

a first module <er c onfigured to recehrdeg conditional access module messages; and 

a second module fea: configured to interpreting the received messages and fef configured to 

generatemg first processor messages for the first processor and second processor messages for the 

second processor from the received messages, 

5. (CURRENTLY AMENDED) The apparatus of claim 4, wherein the interface 
module comprises: 

a third module fee c onfigured to receiveifig a first set of response messages generated by the 
first processor and a second set of response messages generated by the second processor; and 

a fourth module fet configured to gencrateiag conditional access module response messages 
using at least a portion of the first set of response messages and at least a portion of the second set 
of response messages. 

6. -10. (CANCELED) 

1 1 . (CURRENTLY AMENDED) The apparatus of claim [[6]] JL, wherein the interface 
module receives a first set of response messages generated by the first processor and a second set of 
response messages generated by the second processor and generates conditional access response 
messages using at least a pomon of the first set of response messages and at least a portion of the 
second set of response messages. 

12. (CURRENTLY AMENDED) The apparatus of claim 1, wherein the interface 
processor module is a processor. 

13. (CURRENTLY AMENDED) The apparatus of claim 1, wherein the interface 
processor module is a hardware state ma chine . 
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14. (ORIGINAL) The apparatus of claim 1, wherein the first processor and the second 
processor axe comrnunicatively coupled to a shared charge pump. 

15. (CURRENTLY AMENDED) The apparatus of claim 1, wherein the first processor 
and the second processor are communicatively coupled to a shared programming control module* 
the shared progratTLControl module cx ^^T _tn the inter face-Tnodule . 

16. (ORIGINAL) The apparatus of claim 1, wherein the first processor and the second 
processor each include it's own separate components selected from the group comprising: 

voltage supply; 
clock; 

coprocessor; 

read only memory; acid 

random access memory. 

17. (ORIGINAL) The apparatus of claim 1, wherein the first processor and the second 
processor include separate logical address ranges. 

18. (ORIGINAL) The apparatus of claim 1, wherein the first processor and the second 
processor include separate physical address ranges. 

19. (CURRENTLY AMENDED) A method of controlling access to a media program, 
comprising the steps of: 

receiving a message in a conditional access module from a receiver, the message comprising 
encrypted information to be decrypted by operations independently performed by a both a first 
processor and a second processor in the conditional access module; 

generating first processor commands and second processor commands fitom the message; 

providing the first processor commands to the first processor and the second processor 
commands to the second processor, 

receiving a first processor response from the first processor; 
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receiving a second processor response from the second processor; and 

generating a conditional access message response from at least a portion of the first 

processor response and the second processor iesponse[[.]]j 

wherein the media program is encrypted by a control word, the encrypted information is a 

control word packer and the conditional access message response is the control word . 

20. (CANCELED) 

21. (ORIGINAL) The method of claim 19, wherein first processor and the second 
processor operate indepeadendy arid wherein the step of generating first processor commands and 
second processor commands from the message comprises the steps of: 

alternately directing received messages to the first processor and the second processor. 

22. (ORIGINAL) The method of claim 21, wherein the first processor messages and 
the second processor messages define a functional allocation between the first processor and the 
second processor and wherein the functional allocation is time varying. 

23. (ORIGINAL) The method of claim 22, wherein the functional allocation is time 
varied according to a clock teceived externally from the conditional access module. 

24. (ORIGINAL) The method of claim 22, wherein the received messages include 
encrypted data and the functional allocation is time varied according to the encrypted data. 

25- (CURRENTLY AMENDED) An apparatus fo* configured _to controlling access to 
a media program > comprising: 

means for receiving a message in a conditional access module from a receiver, the message 
comprising encrypted information to be decrypted by operations independendy performed by a 
both a first processor and a second processor in the conditional access module; 

means for generating first processor commands and second processor commands from the 
message; 
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means for providing the first processor commands to the first processor and the second 
processor commands to the second processor; 

means for receiving a firsc processor response from the first processor; 

means for receiving a second processor response from the second processor; and 

means for generating a conditional access message response from at least a portion of the 
first processor response and the second processor response 

^herein the media program is encrypt^ fry a control word, the encrypted information jg a 
control word packet, and the conditional acce ss message response is the control word . 

26. (ORIGINAL) The apparatus of claim 25, wherein the encrypted information is a 
control word packer and the conditional access message response is a control word. 

27. (NEW) The apparatus of claim 15, wherein the shared programming control module 
is configured to synchronize common data stored in the first processor and the second processor. 
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